This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
File:                     3F67057F77B86603B6C216FF577CB3146053E4E5.mft (raw, json)
Hash identifier:          ixSIj7R5XhFyRKCEfzI381pcFX3FQvbZwAU+H+e1itY=
Subject key identifier:   21:2F:CA:2E:93:2B:3C:27:39:E7:6A:91:26:9C:CB:CA:CF:C9:BA:94
Authority key identifier: 3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5
Certificate issuer:       /CN=A91301EE0000/serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
Certificate serial:       27CB5A586D18599752BF04FD0254ABEEA1A345B0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
Manifest number:          0109
Signing time:             Sat 06 Dec 2025 00:36:57 +0000
Manifest this update:     Sat 06 Dec 2025 00:31:57 +0000
Manifest next update:     Sun 07 Dec 2025 02:28:57 +0000
Files and hashes:         1: 3F67057F77B86603B6C216FF577CB3146053E4E5.crl (hash: WWVOQ1M00mJndyP4PU6Y0uCyAOeoNsZ3nCU20U213pY=)
                          2: 3136352e39392e3132342e302f32332d3233203d3e20343031363832.roa (hash: 85gBMcl8T92cShSttg2IE1+cL7srToN1WMPpMffNR/c=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl
                          rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 02:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:cb:5a:58:6d:18:59:97:52:bf:04:fd:02:54:ab:ee:a1:a3:45:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91301EE0000, serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
        Validity
            Not Before: Dec  6 00:31:57 2025 GMT
            Not After : Dec  7 02:28:57 2025 GMT
        Subject: CN=212FCA2E932B3C2739E76A91269CCBCACFC9BA94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c0:75:86:57:c3:3a:aa:27:7c:f9:42:3b:29:
                    14:b7:67:71:5d:3e:6c:7d:9a:41:9a:cf:eb:2c:50:
                    11:8b:a8:9e:e5:a2:c2:ba:85:a6:3e:93:03:5b:90:
                    39:15:42:7d:c3:b5:48:71:49:d9:61:23:47:c7:36:
                    d7:af:51:07:11:b1:5f:ce:8b:a0:8b:3e:6e:21:18:
                    44:6a:9c:da:bb:fe:14:4e:f3:62:bb:f4:45:82:4c:
                    5a:91:13:cb:17:62:e9:2d:e1:5d:cd:b7:8f:80:4b:
                    ff:f0:73:30:dd:0e:5e:04:c3:12:80:61:9c:46:30:
                    9d:54:26:5f:e7:fd:dd:cc:46:0c:b8:05:e8:98:24:
                    e5:81:7b:aa:3e:87:7b:63:09:c9:9a:8e:c6:45:ed:
                    82:d6:ae:bf:6e:35:55:19:fc:60:f1:2d:78:e5:f7:
                    43:23:53:4f:b1:74:21:85:35:07:6f:f2:d3:ae:9e:
                    bb:d0:13:2c:f2:10:c0:b2:93:94:0a:74:26:04:2d:
                    af:3d:7d:76:27:6d:bd:13:05:ee:d1:01:96:c5:47:
                    c2:d5:04:46:fc:fa:5c:98:b1:d3:7b:0a:ee:45:74:
                    35:b8:a1:c1:8c:90:2b:fd:cd:53:c4:72:f6:a4:cd:
                    a4:bb:ea:51:7d:c8:07:b6:0d:93:f3:2b:a6:f5:b3:
                    2b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2F:CA:2E:93:2B:3C:27:39:E7:6A:91:26:9C:CB:CA:CF:C9:BA:94
            X509v3 Authority Key Identifier:
                keyid:3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:83:20:d0:07:a5:7f:38:92:30:75:28:e6:d3:3b:b0:55:7a:
         02:2d:3b:eb:47:65:ee:30:d5:c4:17:7d:fc:4f:4d:07:1a:b4:
         4e:d6:d2:aa:ac:e0:a8:3e:db:0a:70:a7:49:20:42:87:ca:be:
         d5:f6:fb:4d:22:29:cf:f4:28:de:5d:c2:33:6d:a0:cd:96:46:
         c8:e7:07:65:4c:2c:8a:64:9c:a4:82:72:67:77:7c:7c:0d:51:
         44:dd:42:85:42:58:19:75:f6:16:f4:24:20:36:35:b1:bf:96:
         96:f0:22:70:cf:91:42:fd:34:48:84:16:e9:87:ea:ba:54:c4:
         c0:c1:97:18:0e:be:0d:14:1d:c5:95:fe:5b:a8:7d:16:88:17:
         5e:2b:59:11:95:fc:2f:5e:43:e5:af:aa:b3:a7:da:6a:dc:c2:
         f7:2f:0b:1c:b0:e0:c5:29:50:b7:4e:39:11:c8:8f:f0:6f:f3:
         b9:0e:3e:3e:58:a8:6b:4e:4d:eb:ad:3a:22:96:09:b3:f5:6b:
         a5:b8:25:ca:b6:93:9f:70:7d:e0:0b:5d:5c:c1:0a:e6:ee:7e:
         fc:33:20:6f:43:ef:76:03:9f:0a:70:4c:11:e3:28:c2:40:d2:
         93:08:2d:c1:d7:a1:46:c2:3c:b3:39:80:df:52:21:fb:b3:f7:
         25:00:be:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:04:15 2025 by rpki-client